WinSecWiki

WinSecWiki » Windows Security Settings » Local Policies » Audit Policy » Audit policy change » Authorization Policy Change

Authorization Policy Change

Expand / Collapse
 
     

Authorization Policy Change


I've only isolated a few events logged by this category. Let me know via a discussion post on this event if you know of more. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 and later can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:


Event IDTitle
4704 A user right was assigned.
4705 A user right was removed.
4714 Encrypted data recovery policy was changed.

Add Your Comments


Name: *
Email Address:
Web Address:
Verification Code:
*
 

Details
Applies To: Vista, Windows Server 2008, Windows Server 2008 R2, Windows 7, Windows 8, Windows Server 2012
Rated 2 stars based on 1 vote.
Article has been viewed 2,190 times.
Options